UF
Product
Utilities Framework
On CISA KEVExploited in the wild
35
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 20Medium 8Low 1
Watch
Add Utilities Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2555 In wildKEV | 9.8 | Jan 15 | Oracle Multiple Products Remote Code Execution Vulnerability Affected: 4.3.0.1.0 through 4.3.0.6.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0; 4.4.0.2.0 |
| CVE-2020-14756 | 9.8 | Jan 20 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components) Affected: 4.3.0.1.0 through 4.3.0.6.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0; 4.4.0.2.0; 4.4.0.3.0 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 4.3.0.1.0 through 4.3.0.6.0; 2.2.0.0.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0; 4.4.0.2.0 |
| CVE-2019-17495 | 9.8 | Oct 10 | A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input… Affected: 4.3.0.6.0; 4.4.0.0.0; 4.4.0.2.0 |
| CVE-2019-10173 | 9.8 | Jul 23 | It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw Affected: 4.3.0.1.0 through 4.3.0.6.0; 2.2.0.0.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0 |
| CVE-2018-8088 | 9.8 | Mar 20 | org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data Affected: 4.2.0.2.0; 4.2.0.3.0; 4.3.0.2.0; 4.3.0.3.0; 4.3.0.4.0; 4.3.0.5.0; +2 more |
Showing 6